@wu529778790/open-im 1.8.1-beta.2 → 1.8.1-beta.21

package/dist/config-web.js

@@ -117,6 +117,7 @@ export function getHealthPlatformSnapshot(file, env = process.env) {
     const fileQQ = file.platforms?.qq;
     const fileWework = file.platforms?.wework;
     const fileDingtalk = file.platforms?.dingtalk;
+    const fileWorkbuddy = file.platforms?.workbuddy;
     const telegramBotToken = env.TELEGRAM_BOT_TOKEN ?? fileTelegram?.botToken ?? file.telegramBotToken;
     const feishuAppId = env.FEISHU_APP_ID ?? fileFeishu?.appId ?? file.feishuAppId;
     const feishuAppSecret = env.FEISHU_APP_SECRET ?? fileFeishu?.appSecret ?? file.feishuAppSecret;
@@ -126,6 +127,9 @@ export function getHealthPlatformSnapshot(file, env = process.env) {
     const weworkSecret = env.WEWORK_SECRET ?? fileWework?.secret;
     const dingtalkClientId = env.DINGTALK_CLIENT_ID ?? fileDingtalk?.clientId;
     const dingtalkClientSecret = env.DINGTALK_CLIENT_SECRET ?? fileDingtalk?.clientSecret;
+    const workbuddyAccessToken = fileWorkbuddy?.accessToken;
+    const workbuddyRefreshToken = fileWorkbuddy?.refreshToken;
+    const workbuddyUserId = fileWorkbuddy?.userId;
     return {
         telegram: {
             configured: !!telegramBotToken,
@@ -157,6 +161,12 @@ export function getHealthPlatformSnapshot(file, env = process.env) {
             healthy: !!(dingtalkClientId && dingtalkClientSecret),
             message: dingtalkClientId && dingtalkClientSecret ? "Client ID and Secret configured" : "Missing credentials",
         },
+        workbuddy: {
+            configured: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId),
+            enabled: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId) && fileWorkbuddy?.enabled !== false,
+            healthy: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId),
+            message: workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId ? "OAuth credentials configured" : "Missing credentials",
+        },
     };
 }
 function splitCsv(value) {
@@ -170,10 +180,20 @@ function clean(value) {
     const trimmed = value.trim();
     return trimmed ? trimmed : undefined;
 }
+const MAX_REQUEST_BODY_BYTES = 1 * 1024 * 1024; // 1 MB
 function readJson(request) {
     return new Promise((resolve, reject) => {
         const chunks = [];
-        request.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
+        let totalBytes = 0;
+        request.on("data", (chunk) => {
+            totalBytes += chunk.length;
+            if (totalBytes > MAX_REQUEST_BODY_BYTES) {
+                reject(new Error("Request body too large (max 1 MB)"));
+                request.destroy();
+                return;
+            }
+            chunks.push(Buffer.from(chunk));
+        });
         request.on("end", () => {
             try {
                 const raw = Buffer.concat(chunks).toString("utf-8");
@@ -190,6 +210,11 @@ function json(response, statusCode, body) {
     response.writeHead(statusCode, { "content-type": "application/json; charset=utf-8" });
     response.end(JSON.stringify(body));
 }
+function maskSecret(value) {
+    if (!value || value.length <= 4)
+        return value ? "****" : "";
+    return value.slice(0, 2) + "****" + value.slice(-2);
+}
 function buildInitialPayload(file) {
     // Load Claude settings from ~/.claude/settings.json
     const claudeEnv = loadClaudeSettingsEnv();
@@ -198,7 +223,7 @@ function buildInitialPayload(file) {
             telegram: {
                 enabled: file.platforms?.telegram?.enabled ?? Boolean(file.platforms?.telegram?.botToken),
                 aiCommand: file.platforms?.telegram?.aiCommand ?? "",
-                botToken: file.platforms?.telegram?.botToken ?? "",
+                botToken: maskSecret(file.platforms?.telegram?.botToken),
                 proxy: file.platforms?.telegram?.proxy ?? "",
                 allowedUserIds: (file.platforms?.telegram?.allowedUserIds ?? []).join(", "),
             },
@@ -206,31 +231,40 @@ function buildInitialPayload(file) {
                 enabled: file.platforms?.feishu?.enabled ?? Boolean(file.platforms?.feishu?.appId && file.platforms?.feishu?.appSecret),
                 aiCommand: file.platforms?.feishu?.aiCommand ?? "",
                 appId: file.platforms?.feishu?.appId ?? "",
-                appSecret: file.platforms?.feishu?.appSecret ?? "",
+                appSecret: maskSecret(file.platforms?.feishu?.appSecret),
                 allowedUserIds: (file.platforms?.feishu?.allowedUserIds ?? []).join(", "),
             },
             qq: {
                 enabled: file.platforms?.qq?.enabled ?? Boolean(file.platforms?.qq?.appId && file.platforms?.qq?.secret),
                 aiCommand: file.platforms?.qq?.aiCommand ?? "",
                 appId: file.platforms?.qq?.appId ?? "",
-                secret: file.platforms?.qq?.secret ?? "",
+                secret: maskSecret(file.platforms?.qq?.secret),
                 allowedUserIds: (file.platforms?.qq?.allowedUserIds ?? []).join(", "),
             },
             wework: {
                 enabled: file.platforms?.wework?.enabled ?? Boolean(file.platforms?.wework?.corpId && file.platforms?.wework?.secret),
                 aiCommand: file.platforms?.wework?.aiCommand ?? "",
                 corpId: file.platforms?.wework?.corpId ?? "",
-                secret: file.platforms?.wework?.secret ?? "",
+                secret: maskSecret(file.platforms?.wework?.secret),
                 allowedUserIds: (file.platforms?.wework?.allowedUserIds ?? []).join(", "),
             },
             dingtalk: {
                 enabled: file.platforms?.dingtalk?.enabled ?? Boolean(file.platforms?.dingtalk?.clientId && file.platforms?.dingtalk?.clientSecret),
                 aiCommand: file.platforms?.dingtalk?.aiCommand ?? "",
                 clientId: file.platforms?.dingtalk?.clientId ?? "",
-                clientSecret: file.platforms?.dingtalk?.clientSecret ?? "",
+                clientSecret: maskSecret(file.platforms?.dingtalk?.clientSecret),
                 cardTemplateId: file.platforms?.dingtalk?.cardTemplateId ?? "",
                 allowedUserIds: (file.platforms?.dingtalk?.allowedUserIds ?? []).join(", "),
             },
+            workbuddy: {
+                enabled: file.platforms?.workbuddy?.enabled ?? Boolean(file.platforms?.workbuddy?.accessToken && file.platforms?.workbuddy?.refreshToken && file.platforms?.workbuddy?.userId),
+                aiCommand: file.platforms?.workbuddy?.aiCommand ?? "",
+                accessToken: maskSecret(file.platforms?.workbuddy?.accessToken),
+                refreshToken: maskSecret(file.platforms?.workbuddy?.refreshToken),
+                userId: file.platforms?.workbuddy?.userId ?? "",
+                baseUrl: file.platforms?.workbuddy?.baseUrl ?? "",
+                allowedUserIds: (file.platforms?.workbuddy?.allowedUserIds ?? []).join(", "),
+            },
         },
         ai: {
             aiCommand: file.aiCommand ?? "claude",
@@ -239,7 +273,7 @@ function buildInitialPayload(file) {
             claudeConfigPath: process.platform === 'win32'
                 ? getClaudeConfigHome() + "\\.claude\\settings.json"
                 : getClaudeConfigHome() + "/.claude/settings.json",
-            claudeAuthToken: claudeEnv.ANTHROPIC_AUTH_TOKEN ?? "",
+            claudeAuthToken: maskSecret(claudeEnv.ANTHROPIC_AUTH_TOKEN),
             claudeBaseUrl: claudeEnv.ANTHROPIC_BASE_URL ?? "",
             claudeModel: claudeEnv.ANTHROPIC_MODEL ?? "",
             claudeProxy: file.tools?.claude?.proxy ?? "",
@@ -276,6 +310,12 @@ function validatePayload(payload) {
         errors.push("DingTalk client ID is required.");
     if (payload.platforms.dingtalk.enabled && !clean(payload.platforms.dingtalk.clientSecret))
         errors.push("DingTalk client secret is required.");
+    if (payload.platforms.workbuddy.enabled && !clean(payload.platforms.workbuddy.accessToken))
+        errors.push("WorkBuddy access token is required.");
+    if (payload.platforms.workbuddy.enabled && !clean(payload.platforms.workbuddy.refreshToken))
+        errors.push("WorkBuddy refresh token is required.");
+    if (payload.platforms.workbuddy.enabled && !clean(payload.platforms.workbuddy.userId))
+        errors.push("WorkBuddy user ID is required.");
     if (!clean(payload.ai.claudeWorkDir))
         errors.push("Default work directory is required.");
     if (!Number.isFinite(payload.ai.claudeTimeoutMs) || payload.ai.claudeTimeoutMs <= 0)
@@ -330,6 +370,17 @@ function validateConfigForPlatform(platform, config) {
                 errors.push("DingTalk client secret is required and must be a non-empty string.");
             }
             break;
+        case "workbuddy":
+            if (!c.accessToken || typeof c.accessToken !== "string" || !clean(c.accessToken)) {
+                errors.push("WorkBuddy access token is required and must be a non-empty string.");
+            }
+            if (!c.refreshToken || typeof c.refreshToken !== "string" || !clean(c.refreshToken)) {
+                errors.push("WorkBuddy refresh token is required and must be a non-empty string.");
+            }
+            if (!c.userId || typeof c.userId !== "string" || !clean(c.userId)) {
+                errors.push("WorkBuddy user ID is required and must be a non-empty string.");
+            }
+            break;
         default:
             errors.push(`Unknown platform: ${platform}`);
     }
@@ -359,6 +410,7 @@ function createProbeConfig(values) {
         wechatAllowedUserIds: [],
         weworkAllowedUserIds: [],
         dingtalkAllowedUserIds: [],
+        workbuddyAllowedUserIds: [],
         aiCommand: "claude",
         codexCliPath: "codex",
         claudeWorkDir: process.cwd(),
@@ -454,6 +506,34 @@ async function probeDingTalk(config) {
     }
     return "DingTalk credentials are valid.";
 }
+async function probeWorkBuddy(config) {
+    const accessToken = clean(String(config.accessToken ?? ""));
+    const refreshToken = clean(String(config.refreshToken ?? ""));
+    const userId = clean(String(config.userId ?? ""));
+    if (!accessToken || !refreshToken || !userId)
+        throw new Error("WorkBuddy access token, refresh token, and user ID are required.");
+    const baseUrl = clean(String(config.baseUrl ?? "")) || "https://copilot.tencent.com";
+    // Validate credentials by attempting to register workspace
+    const response = await fetch(`${baseUrl}/api/copilot/workspace/register`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            "authorization": `Bearer ${accessToken}`,
+        },
+        body: JSON.stringify({
+            userId,
+            hostId: "open-im-test",
+            workspaceId: "open-im-test-workspace",
+            workspaceName: "OpenIM Test Workspace",
+        }),
+        signal: AbortSignal.timeout(TEST_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new Error(`WorkBuddy authentication failed: ${body.slice(0, 200) || `HTTP ${response.status}`}`);
+    }
+    return "WorkBuddy credentials are valid.";
+}
 export async function testPlatformConfig(platform, config) {
     const errors = validateConfigForPlatform(platform, config);
     if (errors.length > 0) {
@@ -470,6 +550,8 @@ export async function testPlatformConfig(platform, config) {
             return probeWeWork(config);
         case "dingtalk":
             return probeDingTalk(config);
+        case "workbuddy":
+            return probeWorkBuddy(config);
         default:
             throw new Error(`Unknown platform: ${platform}`);
     }
@@ -556,6 +638,16 @@ function toFileConfig(payload, existing) {
                 cardTemplateId: clean(payload.platforms.dingtalk.cardTemplateId),
                 allowedUserIds: splitCsv(payload.platforms.dingtalk.allowedUserIds),
             },
+            workbuddy: {
+                ...existing.platforms?.workbuddy,
+                enabled: payload.platforms.workbuddy.enabled,
+                aiCommand: clean(payload.platforms.workbuddy.aiCommand),
+                accessToken: clean(payload.platforms.workbuddy.accessToken),
+                refreshToken: clean(payload.platforms.workbuddy.refreshToken),
+                userId: clean(payload.platforms.workbuddy.userId),
+                baseUrl: clean(payload.platforms.workbuddy.baseUrl),
+                allowedUserIds: splitCsv(payload.platforms.workbuddy.allowedUserIds),
+            },
         },
     };
 }
@@ -811,6 +903,7 @@ export async function startWebConfigServer(options) {
             const fileQQ = file.platforms?.qq;
             const fileWework = file.platforms?.wework;
             const fileDingtalk = file.platforms?.dingtalk;
+            const fileWorkbuddy = file.platforms?.workbuddy;
             const telegramBotToken = process.env.TELEGRAM_BOT_TOKEN ?? fileTelegram?.botToken ?? file.telegramBotToken;
             const feishuAppId = process.env.FEISHU_APP_ID ?? fileFeishu?.appId ?? file.feishuAppId;
             const feishuAppSecret = process.env.FEISHU_APP_SECRET ?? fileFeishu?.appSecret ?? file.feishuAppSecret;
@@ -820,6 +913,9 @@ export async function startWebConfigServer(options) {
             const weworkSecret = process.env.WEWORK_SECRET ?? fileWework?.secret;
             const dingtalkClientId = process.env.DINGTALK_CLIENT_ID ?? fileDingtalk?.clientId;
             const dingtalkClientSecret = process.env.DINGTALK_CLIENT_SECRET ?? fileDingtalk?.clientSecret;
+            const workbuddyAccessToken = fileWorkbuddy?.accessToken;
+            const workbuddyRefreshToken = fileWorkbuddy?.refreshToken;
+            const workbuddyUserId = fileWorkbuddy?.userId;
             const platforms = {};
             // 检查 Telegram
             platforms.telegram = {
@@ -856,6 +952,13 @@ export async function startWebConfigServer(options) {
                 healthy: !!(dingtalkClientId && dingtalkClientSecret),
                 message: (dingtalkClientId && dingtalkClientSecret) ? "Client ID and Secret configured" : "Missing credentials"
             };
+            // 检查 WorkBuddy
+            platforms.workbuddy = {
+                configured: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId),
+                enabled: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId) && fileWorkbuddy?.enabled !== false,
+                healthy: !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId),
+                message: (workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId) ? "OAuth credentials configured" : "Missing credentials"
+            };
             json(response, 200, { platforms, serviceStatus: getServiceStatus() });
             return;
         }

package/dist/config.d.ts

@@ -1,5 +1,5 @@
 import { type LogLevel } from './logger.js';
-export type Platform = 'dingtalk' | 'feishu' | 'qq' | 'telegram' | 'wechat' | 'wework';
+export type Platform = 'dingtalk' | 'feishu' | 'qq' | 'telegram' | 'wechat' | 'wework' | 'workbuddy';
 export type AiCommand = 'claude' | 'codex' | 'codebuddy';
 export interface Config {
     enabledPlatforms: Platform[];
@@ -29,6 +29,7 @@ export interface Config {
     wechatAllowedUserIds: string[];
     weworkAllowedUserIds: string[];
     dingtalkAllowedUserIds: string[];
+    workbuddyAllowedUserIds: string[];
     aiCommand: AiCommand;
     codexCliPath: string;
     codebuddyCliPath: string;
@@ -82,6 +83,17 @@ export interface Config {
             allowedUserIds: string[];
             cardTemplateId?: string;
         };
+        workbuddy?: {
+            enabled: boolean;
+            aiCommand?: AiCommand;
+            allowedUserIds: string[];
+            accessToken?: string;
+            refreshToken?: string;
+            userId?: string;
+            baseUrl?: string;
+            guid?: string;
+            workspacePath?: string;
+        };
     };
 }
 export interface FilePlatformTelegram {
@@ -134,6 +146,17 @@ export interface FilePlatformDingtalk {
     allowedUserIds?: string[];
     cardTemplateId?: string;
 }
+interface FilePlatformWorkBuddy {
+    enabled?: boolean;
+    aiCommand?: AiCommand;
+    allowedUserIds?: string[];
+    accessToken?: string;
+    refreshToken?: string;
+    userId?: string;
+    baseUrl?: string;
+    guid?: string;
+    workspacePath?: string;
+}
 export interface FileToolClaude {
     cliPath?: string;
     workDir?: string;
@@ -167,6 +190,7 @@ export interface FileConfig {
         wechat?: FilePlatformWechat;
         wework?: FilePlatformWework;
         dingtalk?: FilePlatformDingtalk;
+        workbuddy?: FilePlatformWorkBuddy;
     };
     env?: Record<string, string>;
     aiCommand?: string;

package/dist/config.js

@@ -233,6 +233,7 @@ export function loadConfig() {
     const fileWechat = file.platforms?.wechat;
     const fileWework = file.platforms?.wework;
     const fileDingtalk = file.platforms?.dingtalk;
+    const fileWorkBuddy = file.platforms?.workbuddy;
     // 1. 加载各平台凭证（env 优先，其次新结构，最后旧字段）
     const telegramBotToken = process.env.TELEGRAM_BOT_TOKEN ??
         fileTelegram?.botToken ??
@@ -276,6 +277,19 @@ export function loadConfig() {
         fileDingtalk?.clientSecret;
     const dingtalkCardTemplateId = process.env.DINGTALK_CARD_TEMPLATE_ID ??
         fileDingtalk?.cardTemplateId;
+    // WorkBuddy credentials
+    const workbuddyAccessToken = process.env.WORKBUDDY_ACCESS_TOKEN ??
+        fileWorkBuddy?.accessToken;
+    const workbuddyRefreshToken = process.env.WORKBUDDY_REFRESH_TOKEN ??
+        fileWorkBuddy?.refreshToken;
+    const workbuddyUserId = process.env.WORKBUDDY_USER_ID ??
+        fileWorkBuddy?.userId;
+    const workbuddyBaseUrl = process.env.WORKBUDDY_BASE_URL ??
+        fileWorkBuddy?.baseUrl;
+    const workbuddyGuid = process.env.WORKBUDDY_GUID ??
+        fileWorkBuddy?.guid;
+    const workbuddyWorkspacePath = process.env.WORKBUDDY_WORKSPACE_PATH ??
+        fileWorkBuddy?.workspacePath;
     // 2. 计算启用平台
     const enabledPlatforms = [];
     const telegramEnabledFlag = fileTelegram?.enabled;
@@ -284,6 +298,7 @@ export function loadConfig() {
     const wechatEnabledFlag = fileWechat?.enabled;
     const weworkEnabledFlag = fileWework?.enabled;
     const dingtalkEnabledFlag = fileDingtalk?.enabled;
+    const workbuddyEnabledFlag = fileWorkBuddy?.enabled;
     const telegramEnabled = !!telegramBotToken && (telegramEnabledFlag !== false);
     const feishuEnabled = !!(feishuAppId && feishuAppSecret) && (feishuEnabledFlag !== false);
     const qqEnabled = !!(qqAppId && qqSecret) && (qqEnabledFlag !== false);
@@ -294,6 +309,8 @@ export function loadConfig() {
     // 企业微信只需要 corpId (botId) 和 secret
     const weworkEnabled = !!(weworkCorpId && weworkSecret) && (weworkEnabledFlag !== false);
     const dingtalkEnabled = !!(dingtalkClientId && dingtalkClientSecret) && (dingtalkEnabledFlag !== false);
+    // WorkBuddy 需要 OAuth 凭证
+    const workbuddyEnabled = !!(workbuddyAccessToken && workbuddyRefreshToken && workbuddyUserId) && (workbuddyEnabledFlag !== false);
     if (telegramEnabled)
         enabledPlatforms.push('telegram');
     if (feishuEnabled)
@@ -306,6 +323,8 @@ export function loadConfig() {
         enabledPlatforms.push('wework');
     if (dingtalkEnabled)
         enabledPlatforms.push('dingtalk');
+    if (workbuddyEnabled)
+        enabledPlatforms.push('workbuddy');
     if (enabledPlatforms.length === 0) {
         throw new Error('至少需要配置 Telegram、Feishu、WeChat、WeWork 或 DingTalk 其中一个平台（可以通过环境变量或 config.json）');
     }
@@ -332,6 +351,9 @@ export function loadConfig() {
     const dingtalkAllowedUserIds = process.env.DINGTALK_ALLOWED_USER_IDS !== undefined
         ? parseCommaSeparated(process.env.DINGTALK_ALLOWED_USER_IDS)
         : fileDingtalk?.allowedUserIds ?? allowedUserIds;
+    const workbuddyAllowedUserIds = process.env.WORKBUDDY_ALLOWED_USER_IDS !== undefined
+        ? parseCommaSeparated(process.env.WORKBUDDY_ALLOWED_USER_IDS)
+        : fileWorkBuddy?.allowedUserIds ?? allowedUserIds;
     // 5. AI / 工作目录 / 安全配置（从 tools 读取）
     const aiCommand = normalizeAiCommand(process.env.AI_COMMAND ?? file.aiCommand, 'claude');
     const tc = file.tools?.claude ?? {};
@@ -579,6 +601,29 @@ export function loadConfig() {
                 allowedUserIds: dingtalkAllowedUserIds,
                 cardTemplateId: dingtalkCardTemplateId,
             },
+        workbuddy: workbuddyEnabled
+            ? {
+                enabled: true,
+                aiCommand: normalizeAiCommand(file.platforms?.workbuddy?.aiCommand, aiCommand),
+                allowedUserIds: workbuddyAllowedUserIds,
+                accessToken: workbuddyAccessToken,
+                refreshToken: workbuddyRefreshToken,
+                userId: workbuddyUserId,
+                baseUrl: workbuddyBaseUrl,
+                guid: workbuddyGuid,
+                workspacePath: workbuddyWorkspacePath,
+            }
+            : {
+                enabled: false,
+                aiCommand: normalizeAiCommand(file.platforms?.workbuddy?.aiCommand, aiCommand),
+                allowedUserIds: workbuddyAllowedUserIds,
+                accessToken: workbuddyAccessToken,
+                refreshToken: workbuddyRefreshToken,
+                userId: workbuddyUserId,
+                baseUrl: workbuddyBaseUrl,
+                guid: workbuddyGuid,
+                workspacePath: workbuddyWorkspacePath,
+            },
     };
     return {
         enabledPlatforms,
@@ -608,6 +653,7 @@ export function loadConfig() {
         wechatAllowedUserIds,
         weworkAllowedUserIds,
         dingtalkAllowedUserIds,
+        workbuddyAllowedUserIds,
         aiCommand,
         codexCliPath,
         codebuddyCliPath,

package/dist/constants.d.ts

@@ -11,6 +11,8 @@ export declare const CARDKIT_THROTTLE_MS = 80;
 export declare const TELEGRAM_THROTTLE_MS = 200;
 /** WeChat 流式更新节流：1000ms（AGP 协议建议值） */
 export declare const WECHAT_THROTTLE_MS = 1000;
+/** WorkBuddy 流式更新节流：1000ms（Centrifuge 协议建议值） */
+export declare const WORKBUDDY_THROTTLE_MS = 1000;
 export declare const WEWORK_THROTTLE_MS = 500;
 export declare const MAX_TELEGRAM_MESSAGE_LENGTH = 4000;
 export declare const MAX_FEISHU_MESSAGE_LENGTH = 4000;

package/dist/constants.js

@@ -32,6 +32,8 @@ export const CARDKIT_THROTTLE_MS = 80;
 export const TELEGRAM_THROTTLE_MS = 200;
 /** WeChat 流式更新节流：1000ms（AGP 协议建议值） */
 export const WECHAT_THROTTLE_MS = 1000;
+/** WorkBuddy 流式更新节流：1000ms（Centrifuge 协议建议值） */
+export const WORKBUDDY_THROTTLE_MS = 1000;
 export const WEWORK_THROTTLE_MS = 500;
 export const MAX_TELEGRAM_MESSAGE_LENGTH = 4000;
 export const MAX_FEISHU_MESSAGE_LENGTH = 4000;

package/dist/dingtalk/client.js

@@ -7,7 +7,9 @@ const TEXT_MSG_KEY = 'sampleText';
 const DINGTALK_STREAM_HOST = 'wss-open-connection.dingtalk.com';
 let client = null;
 let messageHandler = null;
+// sessionWebhook 有过期时间（约 2 小时），需要记录时间戳
 const sessionWebhookByChat = new Map();
+const WEBHOOK_TTL_MS = 90 * 60 * 1000; // 90 分钟后视为过期
 const unionIdByUserId = new Map();
 let dingtalkWarnFilterInstalled = false;
 export function shouldSuppressDingTalkSocketWarn(args) {
@@ -44,13 +46,19 @@ function getClient() {
 export function registerSessionWebhook(chatId, sessionWebhook) {
     if (!chatId || !sessionWebhook)
         return;
-    sessionWebhookByChat.set(chatId, sessionWebhook);
+    sessionWebhookByChat.set(chatId, { webhook: sessionWebhook, registeredAt: Date.now() });
 }
 async function sendByWebhook(chatId, body) {
-    const sessionWebhook = sessionWebhookByChat.get(chatId);
-    if (!sessionWebhook) {
+    const entry = sessionWebhookByChat.get(chatId);
+    if (!entry) {
         throw new Error(`DingTalk sessionWebhook unavailable for chat ${chatId}`);
     }
+    // 检查 webhook 是否过期
+    if (Date.now() - entry.registeredAt > WEBHOOK_TTL_MS) {
+        sessionWebhookByChat.delete(chatId);
+        throw new Error(`DingTalk sessionWebhook expired for chat ${chatId}`);
+    }
+    const sessionWebhook = entry.webhook;
     const accessToken = await getClient().getAccessToken();
     const res = await fetch(sessionWebhook, {
         method: 'POST',

package/dist/dingtalk/event-handler.js

@@ -99,7 +99,8 @@ async function buildMediaPrompt(message, kind, robotCodeFallback) {
                 fallbackExtension: kind === 'image' ? 'jpg' : 'bin',
             });
         }
-        catch {
+        catch (err) {
+            log.warn('Failed to download DingTalk media from URL:', err);
             localPath = undefined;
         }
     }
@@ -118,7 +119,8 @@ async function buildMediaPrompt(message, kind, robotCodeFallback) {
                 localPath = await saveBufferMedia(downloaded.buffer, extension, basenameHint);
             }
         }
-        catch {
+        catch (err) {
+            log.warn('Failed to download DingTalk media via robotCode:', err);
             localPath = undefined;
         }
     }
@@ -185,7 +187,20 @@ export function setupDingTalkHandlers(config, sessionManager) {
             : undefined;
         log.info(`[AI_REQUEST] Running ${aiCommand} for user ${userId}, sessionId=${sessionId ?? 'new'}`);
         const toolId = aiCommand;
-        const msgId = await sendThinkingMessage(chatId, replyToMessageId, toolId, dingtalkTarget);
+        let msgId;
+        try {
+            msgId = await sendThinkingMessage(chatId, replyToMessageId, toolId, dingtalkTarget);
+        }
+        catch (err) {
+            log.error('Failed to send thinking message:', err);
+            try {
+                await sendTextReply(chatId, '启动 AI 处理失败，请重试。');
+            }
+            catch (err) {
+                log.warn('Failed to send startup error reply:', err);
+            }
+            return;
+        }
         const stopTyping = startTypingLoop(chatId);
         const taskKey = `${userId}:${msgId}`;
         await runAITask({ config, sessionManager }, { userId, chatId, workDir, sessionId, convId, platform: 'dingtalk', taskKey }, prompt, toolAdapter, {

package/dist/dingtalk/message-sender.js

@@ -24,6 +24,19 @@ const FLOW_STATUS = {
 };
 let senderSettings = {};
 const streamStates = new Map();
+// Periodic cleanup of orphaned stream states (max 30 minutes)
+const STREAM_MAX_AGE_MS = 30 * 60 * 1000;
+setInterval(() => {
+    const now = Date.now();
+    for (const [id, state] of streamStates) {
+        // streamStates in DingTalk don't have createdAt, clean up by size
+        if (streamStates.size > 50) {
+            streamStates.delete(id);
+            log.info(`Cleaned up old DingTalk stream state: ${id}`);
+            break; // Clean one at a time to avoid blocking
+        }
+    }
+}, STREAM_MAX_AGE_MS);
 function generateMessageId() {
     return `${Date.now()}-${randomBytes(6).toString('hex')}`;
 }